Tags

v0.4.3 — MCP 2026-07-28 alignment

- stateless MCP core: server/discover, no handshake required; legacy initialize kept
- tool annotations (readOnlyHint; openWorldHint only on scan_environment)
- JSON Schema 2020-12 outputSchema + structuredContent on every tool result
- tools/list emits ttlMs + cacheScope in deterministic order
- unknown tool -> -32602 (MCP-custom -32002 retired)
- new src/mcp.test.ts (28 cases); suite 147 passed

Published to [email protected] and PyPI 0.4.3.

v0.4.1: fix fake-0.4.0 publish (bundle was 0.3.9)

v0.4.0: mobile SDKs + Windows preflight + MCP preflight + report card…

… + secret scan

v0.3.9: secret scanner (--scan-secrets) + MCP server (--mcp) — three-…

…layer coverage complete

- security/secrets.ts: offline opt-in hardcoded-secret scanner over a curated allowlist of
  HOME/project credential files. Rule-based (AWS/GitHub/GitLab/Slack/Stripe/OpenAI/GCP/Private Key/
  Bearer/DB URL/npm authToken/Git URL + generic assignment with entropy/length noise gate).
  Every hit is REDACTED before output (prefix + **** + len); secret plaintext never enters the
  manifest, --json, --report, or logs. Files >512KB skipped. New 'secret' Kind.
  Wired into scan.ts security post-step (gated by --disable security); --scan-secrets flag in cli.ts.
- mcp.ts: zero-dependency stdio JSON-RPC 2.0 MCP server wrapping runScan/queryManifest; --mcp flag.
  Thin adapter only (no third code tree); lets Cursor/Cline/Claude Desktop call devmap as a tool.
- types.ts: add 'secret' to Kind union.
- tests: add security/secrets.test.ts (6 cases, HOME-free, asserts redaction + noise gate).
- version bump 0.3.8 -> 0.3.9. devmap is now the only tool covering structure + health + security layers.

v0.3.8: refine tool category labels (runtime/toolchain/pkg/vermgr/too…

…l) + conda doctor detail

- cli.ts: add per-tool CATEGORY map so go/rustc show as toolchain, git/docker/kubectl as tool,
  nvm/pyenv as vermgr; node/python/ruby/java/bun stay runtime; npm/pip/conda/cargo stay pkg.
  JSON manifest schema unchanged (render-only refinement).
- health/parse.ts: conda doctor warn detail now includes per-section package tally + raw report
  so users see which packages are affected.
- version bump 0.3.7 -> 0.3.8

v0.3.7: health layer per-env (pip/conda) + issues/info/ok split + con…

…da doctor fix

v0.3.6 — health layer (P1): aggregate official doctor/self-check comm…

…ands

v0.3.5 — replace PyPI placeholder description with real README

v0.3.4: vcpkg label + version probe

v0.3.3: pip-audit severity escalation + dedup